
In today's competitive marketplace, third-party service organizations are now expected to have adequate controls and safeguards when they host, process or account for their customers' data and assets. As a result, SAS 70/SSAE 16 service auditor’s reports are being used for a multitude of purposes, including:
as market differentiators to provide assurance that they are adequately satisfying their clients’ business control objectives
as a benchmark from which they can monitor the ongoing acceptability of their controls and risk management and internal audit activities
as tools for companies going public to capture valuable due diligence information
EKS&H's risk advisory professionals guide clients through the SAS 70 process, offering Type 1 and Type 2 service auditor’s reports, as well as SAS 70/SSAE 16 readiness assessments designed to prepare clients for the more in-depth SAS 70 audit. This assessment offers procedures, controls and documentation services and deliverables.
EKS&H adds value to every SAS 70/SSAE 16 audit by offering:
a risk-based approach to control evaluation by testing only relevant, key controls
a team with the extensive IT experience necessary to address IT application controls simultaneously with manual
*SAS 70 will be superseded by SSAE 16 for reporting periods on or after June 15, 2011. Earlier implementation is permitted.
